aboutsummaryrefslogtreecommitdiffstats
path: root/src/config
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2026-11-08 17:07:03 +0000
committertv <tv@krebsco.de>2026-11-08 19:28:22 +0100
commitf91604095e6f0978c61f66d0b937e36271637e6b (patch)
treee05cd2a21dd4122c3a8a3a450b3605b5a094416b /src/config
parent5f69ecf6284a8061a2b8fae5b8f98d67a67dad5f (diff)
remake: no --follow-strict-remakes; a strict remake failing says who
A strict remake takes a majority of members whose --strict-keys take its manifest's signer: no node votes for one without, so --follow-strict-remakes (1173) goes. A node that doesn't vote still switches once the others commit, as with any remake. So that an operator can tell why one fails: a strict remake aborted for want of a majority (the voting period over, or a majority out of reach) says in its reason (GET /admin/remakes/{id}, and the coordinator's log) which members didn't vote, and that a member votes for one only with its manifest signed by a key of its --strict-keys. Each of those logs why itself (`Not voting for a strict remake`). The sim a_strict_remake_too_few_take: only a takes the manifest; the remake aborts, naming b and c.
Diffstat (limited to 'src/config')
-rw-r--r--src/config/mod.rs12
1 files changed, 2 insertions, 10 deletions
diff --git a/src/config/mod.rs b/src/config/mod.rs
index fb707dd..0352832 100644
--- a/src/config/mod.rs
+++ b/src/config/mod.rs
@@ -184,14 +184,7 @@ pub(crate) const OPTIONS: &[OptionSpec] = &[
Kind::List,
"KEY,[KEY...]",
None,
- "SSH keys, as authorized_keys lines (ssh-ed25519 <base64> [comment]), whose signature on a strict remake's manifest this node takes: the values kept when the swarm turns strict (docs/access.md). Without, it votes for no strict remake, unless follow-strict-remakes.",
- ),
- option(
- "follow-strict-remakes",
- Kind::Flag,
- "BOOL",
- Some("false"),
- "Without strict-keys: vote for strict remakes all the same, taking the manifests as the members proposing them sign them.",
+ "SSH keys, as authorized_keys lines (ssh-ed25519 <base64> [comment]), whose signature on a strict remake's manifest this node takes: the values kept when the swarm turns strict (docs/access.md). Without, it votes for no strict remake; a majority of the members must take the manifest's signer for one to commit.",
),
option(
"log-format",
@@ -610,8 +603,7 @@ pub(crate) struct Settings {
pub(crate) bootstrap_keys: Vec<String>,
#[serde(default)]
pub(crate) strict_keys: Vec<String>,
- #[serde(default)]
- pub(crate) follow_strict_remakes: bool,
+
#[serde(default)]
pub(crate) cors_origins: Vec<String>,
#[serde(default)]